Duke to Enhance Online Security Measures [updated]

Update: Further information is available at oit.duke.edu/services-tools/security/dukes-online-security-measures.

As online threats continue to evolve and become more sophisticated, Duke must continue to adapt its cybersecurity measures to protect users and keep their data safe. As a result, several changes will be implemented across Duke University, Duke Health, and Duke Kunshan in the next several months.

These updates will roll out over the next several months and will feature three of Duke’s most valuable cybersecurity tools: Duo Mobile, Duke Unlock, and 1Password. 

When used together, these tools provide a seamless solution for accessing Duke resources securely, and making authentication quick, easy, and reliable.

Upcoming Changes

• Extended “Remember Me” Period – Soon, Duke users will only need to re-authenticate every five days instead of three. 
• Enhanced Password Checks – Any new or updated passwords will be automatically checked against a database of known compromised passwords. If a password has been compromised, users will be prompted to choose a safer one.
• Phasing Out of Phone Call and SMS Authentication – Duke is gradually retiring phone and SMS authentication by March 31, 2025, to focus on options like Duo Mobile and Duke Unlock, which are more secure and reliable.

No action is required at this time. Those not familiar with Duke's security tools can work with their IT support to learn more about how best to authenticate and protect Duke data and personal information.

• Duo Mobile – Duo Mobile provides a quick and secure method to verify identity. Using the Duo Mobile app on a mobile device is convenient and easy. https://oit.duke.edu/service/duo
• Duke Unlock – Duke Unlock is a key part of Duke's multi-factor authentication (MFA) approach, offering a secure, and password-free way to log in. It’s a simple way to authenticate without typing in a password each time. Check out Duke Unlock in account settings or reach out to IT support for help. https://oit.duke.edu/service/duke-unlock
• 1Password – Don’t stress about remembering passwords. 1Password is available at no cost to all Duke faculty, staff, and students. 1Password safely stores passwords in one place, helps create strong ones, and allows access to them across devices. https://oit.duke.edu/service/1password 

Working Together

Duke University, Duke Health and Duke Kunshan are fully aligned on policy and timeline, with each adopting tailored roll-out strategies to best meet their unique needs. Duke’s IT teams will work together to assist with setting up Duo Mobile, Duke Unlock, and 1Password, answer any questions, and ensure access to the latest tools available.

For questions about the upcoming changes, contact local IT support, the Duke University Service Desk, https://oit.duke.edu/help/, Duke Kunshan IT Service Desk, service-desk@dukekunshan.edu.cn, or the DHTS Service Desk, https://duke.service-now.com/ess.